I-VPN ye-Mac, isihlungi sokuqukethwe noma i-Private Relay: yikuphi okusebenzayo
Izendlalelo ezintathu zenethiwekhi ze-Mac zibukeka zifana kuzilungiselelo. Hlukanisa i-VPN, isihlungi sokuqukethwe kanye ne-Private Relay ngomzila wokuphuma, inqubomgomo yokugeleza kanye nobubanzi bokuphequlula.
I-Mac yakho ingaba nomhubhe we-VPN, isihlungi sokuqukethwe kanye ne-iCloud Private Relay kufakwe ngasikhathi sinye, futhi akukho kuzo okumemezela ukuthi yikuphi okwakha uxhumano oluthile. Amaphaneli ezilungiselelo abukeka efana, izithonjana zibukeka zifana, futhi cishe wonke umthengisi ubiza umkhiqizo wakhe ngokuthi ukuphepha kwenethiwekhi. Amaqiniso amathathu ayahlukanisa: ukuthi ithrafikhi iphuma ngokusebenzisa iphoyinti lokugcina elikude ongalisho yini, ukuthi injini yenqubomgomo yenza izinqumo zokuvumela-noma-ukulahla kumagelezi ngamanye yini, nokuthi ukuvikelwa kuyama ku-Safari yini. Lungisa lezi zinthathu futhi imibuzo eminingi yokuthi i-VPN-yami-ivuliwe izoziphendula yona.
Imibandela emithathu ekhomba ingxenye
Umbandela wokuqala ukuphuma. Umhlinzeki womhubhe unikeza amaphakethe esangweni elikude, ngakho ikheli lakho lomphakathi liyashintsha futhi, uma iphrofayili isho kanjalo, abasingathi abangemuva kwalelo sango bayafinyeleleka. Uma ikheli lingashintshi neze futhi kungavuleki sibonelo esiyimfihlo, awubheki umhubhe osebenzayo, noma ngabe isho ukuthini indawo yemenyu.
Umbandela wesibili isinqumo. Isihlungi sokuqukethwe sihlola amagelezi futhi sibuyisela ukuvumela noma ukulahla. Singaphoqa ukuvinjelwa kwesigaba, umthetho wohlelo lokusebenza ngalunye noma inqubomgomo ethunyelwe umqashi, futhi singabhala phansi isinqumo. Esingakwazi ukukwenza sodwa ukunikeza ithrafikhi indawo yokuya kuyo.
Umbandela wesithathu ububanzi. I-Private Relay ivikela ingxenye echaziwe yokuphequlula hhayi idivayisi yonke, futhi umsebenzi wayo ukwehlukanisa ukuthi ungubani nokuthi uvakashela ini, hhayi ukukubeka kwenye inethiwekhi.
Zibeke ndawonye futhi imingcele kunzima ukuyiphuthelwa:
| Layer | Question it answers | Evidence to look for | What it does not do |
|---|---|---|---|
| VPN tunnel provider | Where does my traffic emerge, and which private networks can I reach? | Changed public address, a connected service, a default route through a utun interface | Enforce per-app content policy |
| Content filter | May this flow proceed, and who decided? | A filter extension in Network Extensions, drop verdicts, an MDM profile | Supply a different public exit |
| iCloud Private Relay | Can the local network see which sites Safari loads? | A relay egress address in Safari only, the relay toggle in iCloud settings | Cover other apps or grant access to a private subnet |
Isihlungi sokuqukethwe iyinjini yenqubomgomo, hhayi indlela yokuphuma
Ku-macOS isihlungi siza njenge-Network Extension eyakhiwe phezu kwesigaba somhlinzeki wedatha yesihlungi sika-Apple, i-NEFilterDataProvider. Ekusetshenzisweni okuphethwe, i-MDM iyasicindezela, sifakwa njengesandiso sesistimu futhi sigunyazwa kanye ngaphansi kwe-System Settings > General > Login Items and Extensions. Kusukela lapho sibona amagelezi e-TCP, futhi kwezinye izilungiselelo ne-UDP, futhi sibuyisela isinqumo kwelinye ngayinye.
Indlela yokwehluleka iyona edida abantu. Isihlungi esilahla igelesi sidala ukuphelelwa yisikhathi, ukuxhawulana kwe-TLS okumile noma ukusethwa kabusha, okubukeka ngqo njengomhubhe ophakamile kodwa ongakwazi ukudlulisa ithrafikhi. Ikheli lomphakathi alizange lishintshe, ngoba kwakungekho ndlela yokuphuma eyayingalishintsha.
Amaklayenti ezentengiselwano avame ukuhlanganisa zombili izindima. Isifaki esisodwa siletha umhlinzeki womhubhe nesihlungi, isihlungi senza ukuvimba futhi umhubhe wenza umzila. Ngakho igama lohlelo lokusebenza alikutsheli lutho mayelana nokuthi iyiphi ingxenye yenqabe uxhumano. Hlola uhlu lwezandiso, bese kuba yisevisi exhunyiwe, bese kuba yilogi yeklayenti, ngalolo hlelo.
I-Private Relay ihlanganisa i-Safari, hhayi umshini wonke
I-Private Relay ithumela ukuphequlula ekuhlanganisayo ngamarelay amabili aphethwe izinhlangano ezihlukene, ngakho akekho umsebenzi oyedwa ophethe kokubili ubunikazi bakho nezindawo oziya kuzo. Lona umklamo wobumfihlo, hhayi umhubhe: akukho sango ongangena kulo, akukho sibonelo esiyimfihlo, futhi akukho ndlela yokugxilisa ikheli lokuphuma ezweni olikhethayo.
Ububanzi baso bunqunyiwe ngamabomu: buhlanganisa ukuphequlula kwe-Safari kanye nemibuzo ye-DNS nokulayisha kwe-HTTP okungaphephile okuhamba nakho. Isikhathi setheminali, iklayenti le-imeyili, uhlelo lokusebenza lwengxoxo nesiqalisi somdlalo kumi ngaphandle. Uma ukuhlola kutheminali kusabonisa ikheli lenethiwekhi yakho yokufinyelela kuyilapho i-Safari ibonisa ikheli lerelay, lowo umphumela olindelekile, hhayi ukufakwa okugqekeziwe.
Ukutholakala kuncike emibandeleni. Kudinga uhlelo lwe-iCloud+, akunikezwa kuzo zonke izifunda, futhi inethiwekhi ephethwe ingavimba ukufinyelela kwerelay, futhi lapho i-Safari ibuyela ekuxhumaneni okuqondile. Uhlolojikelele lwe-Private Relay luka-Apple luyisithenjwa sobubanzi bamanje. Uma iphrofayili ye-VPN ixhunyiwe futhi ithwala leyo thrafikhi, irelay alifakwa phezu kwayo; umzila unqunywa iphrofayili.
Funda ubufakazi ngokulandelana okulungile
Qala ngesimo sensevisi, ngoba yisibonakaliso esishibhe kakhulu. I-scutil --nc list iphrinta amasevisi e-VPN alungisiwe nokuthi ngalinye lixhunyiwe yini. Iphrofayili ingahlala lapho iminyaka ngaphandle kokuxhuma neze, futhi abantu bavame ukuyibala njengomhubhe.
Bese ubheka ama-interface nemizila. I-ifconfig ibonisa ama-interface e-utun, kodwa ukuba khona kwawo kuphela akufakazeli okuningi, ngoba i-macOS isebenzisa i-utun ngezinjongo eziningi ngaphandle kwe-VPN. Okubalulekile ukuthi umzila ozenzakalelayo uya komunye wawo yini, lokho okubikwa yi-route -n get default.
Ekuxazululeni amagama i-scutil --dns ibala abaxazululi izosetshenziswa ngempela isistimu, futhi lapho kuvela umhlinzeki we-proxy ye-DNS. Ukuqhathanisa i-dig +short example.com ne-dig +short example.com @1.1.1.1 kuhlukanisa umxazululi ophendulayo kumxazululi obanjwayo.
Umsebenzi wezandiso ufinyelela ilogi ehlanganisiwe: log show --predicate 'subsystem == "com.apple.networkextension"' --last 5m. Ufuna ukwazi ukuthi isiphi isandiso esiqalile nokuthi ingabe isihlungi sabika isinqumo ngigelesi okukhathazayo, hhayi umugqa okufanele uwukhumbule.
Nciphisa uphawu ngaphambi kokucisha noma yini
Qala ngokuhlukanisa ukwehluleka. Igama elingaxazululeki, uxhumano olunqatshwa ngokushesha, kanye noxhumano olulenga kuze kuphele isikhathi kuyizinto ezintathu ezihlukene eziqashelwayo ezinabanikazi abathathu abahlukene. Ukuxazulula kukhombisa umxazululi noma i-proxy ye-DNS. Ukunqatshwa ngokushesha kukhombisa umthetho wesihlungi. Ukuthula kuvame ukukhombisa umzila, noma umhubhe ophakamile kodwa ongadlulisi.
Ku-Mac ephethwe, cabanga ukuthi isihlungi sengxenye yenhlangano. Ukusicisha ukuze uhlole i-VPN kususa ingxenye obufuna ukuyibona, futhi i-MDM ivame ukusibuyisela ekuhlolweni okulandelayo. Buza umqondisi igama lenqubomgomo ngaphambi kokushintsha noma yini, futhi uhlole ngohlelo oluthile olwehlulekile hhayi ngesistimu yonke.
Enye ingibe: ukucisha i-Private Relay ukuze uhlole i-VPN akusho lutho ngethrafikhi yangaphandle, ngoba irelay alizange liyihlanganise leyo thrafikhi. Isendlalelo ngasinye kufanele sihlolwe kuhlelo olusilawulayo ngempela.
Dlula kulolu hlu futhi ume entweni yokuqala ehlulekayo:
- Ingabe i-
scutil --nc listibonisa isevisi oyilindele njengexhunyiwe? - Ingabe ikheli lomphakathi elibonakala kutheminali lihlukile kulelo elinikezwe inethiwekhi yakho yokufinyelela?
- Ingabe isandiso sesihlungi sifakiwe, futhi sabhala isinqumo ngigelesi elihlulekayo?
- Ingabe ukwehluleka kuse-Safari kuphela? Uma kunjalo, hlola ububanzi berelay ngaphambi kokusola umhubhe.
Uma zozine zidlula kanti uhlelo lusahluleka, inkinga ingaphezulu kwesendlalelo senethiwekhi: izilungiselelo ze-proxy, ukwethenjwa kwesitifiketi noma uhlu oluvunyelwe ezingeni lohlelo.